$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B0F9F6ADE6146F86AFFA55E79F85D04B0C13EEF.cer File: 1B0F9F6ADE6146F86AFFA55E79F85D04B0C13EEF.cer (raw, json) Hash identifier: Txf4Z3FAGcoq9I7PYlrBqViYvoOeJ7BhEVKO3vyU7BY= Subject key identifier: 1B:0F:9F:6A:DE:61:46:F8:6A:FF:A5:5E:79:F8:5D:04:B0:C1:3E:EF Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 7CC5D134A377255A11128BC844EF6FAACDA9B018 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/8FC2692E9603D23AF02853DC75D35F465BF61721FEEA8F1D965544177D2F9846/0/1B0F9F6ADE6146F86AFFA55E79F85D04B0C13EEF.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/8FC2692E9603D23AF02853DC75D35F465BF61721FEEA8F1D965544177D2F9846/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 05 Feb 2025 05:37:05 +0000 Certificate not after: Wed 04 Feb 2026 05:42:05 +0000 Subordinate resources: AS: 61493 IP: 131.255.4.0/22 IP: 168.205.92.0/22 IP: 170.78.72.0/22 IP: 2803:eb80::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 09 Nov 2025 01:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:c5:d1:34:a3:77:25:5a:11:12:8b:c8:44:ef:6f:aa:cd:a9:b0:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Feb 5 05:37:05 2025 GMT Not After : Feb 4 05:42:05 2026 GMT Subject: CN=1B0F9F6ADE6146F86AFFA55E79F85D04B0C13EEF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:cd:5d:e7:02:0b:5d:d9:69:d6:f9:32:55:ee: e2:0a:1c:35:4f:0a:b3:85:ad:0b:7a:c7:ca:13:96: 39:61:57:f5:e2:23:8e:e1:6b:19:60:aa:e8:bc:bf: af:5b:3e:c8:20:8a:e7:71:96:15:94:b1:c9:28:1b: 4a:38:80:d7:81:cf:43:66:40:25:3d:01:c8:a2:41: 95:16:be:bd:8c:e8:f6:c4:c9:a6:50:56:9f:ec:aa: 9b:e8:ae:b4:6d:57:2a:2e:ac:e4:c2:42:0c:fc:9f: ce:92:e8:46:81:41:10:85:9e:30:97:3b:b4:9f:58: 46:b6:fa:25:73:dd:6b:88:66:d8:10:a1:8b:18:63: fb:86:08:13:38:27:45:2d:8a:c5:b5:1e:70:22:17: 4f:c2:82:3e:d3:e1:06:9c:69:6b:80:d8:cd:62:2a: bb:32:90:5e:2a:47:4e:cb:3f:b9:bd:c6:ed:e5:8a: d9:97:a2:bf:db:7d:34:b7:c3:12:7e:4e:eb:fb:2f: cd:80:97:cb:2f:c3:cc:20:e7:47:68:dd:83:78:26: bc:e0:dd:02:b8:de:7e:45:3e:8b:05:c9:86:25:6d: 4a:0b:2d:b1:a9:7f:de:31:4e:ec:50:75:8e:7e:63: fd:49:6c:b7:e5:c8:3d:9d:e1:c9:b6:5e:5b:64:51: 13:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 1B:0F:9F:6A:DE:61:46:F8:6A:FF:A5:5E:79:F8:5D:04:B0:C1:3E:EF X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/8FC2692E9603D23AF02853DC75D35F465BF61721FEEA8F1D965544177D2F9846/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/8FC2692E9603D23AF02853DC75D35F465BF61721FEEA8F1D965544177D2F9846/0/1B0F9F6ADE6146F86AFFA55E79F85D04B0C13EEF.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 131.255.4.0/22 168.205.92.0/22 170.78.72.0/22 IPv6: 2803:eb80::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 61493 Signature Algorithm: sha256WithRSAEncryption b5:ae:0e:4a:8d:66:e2:b5:bd:2c:f0:d0:b2:3e:af:5f:74:16: fa:d9:5b:cc:50:d6:5f:ea:ca:18:64:ee:ab:9a:e0:fc:0f:9e: 1e:91:b6:05:8c:84:bd:9b:ea:92:bc:a7:64:78:93:f2:11:88: 46:ab:a9:32:03:91:f6:5d:1b:19:a7:c1:72:a2:07:4e:d6:0e: 70:1b:e1:56:6f:2d:66:8b:84:8b:a3:ce:a0:81:18:c6:e5:f1: a2:4a:f9:9b:2c:e8:96:37:eb:bd:89:9f:07:e4:f5:a8:88:c9: df:ac:71:a9:98:05:2a:de:c0:e8:ff:6b:26:b8:d0:f3:01:0f: 63:78:1c:9d:21:3c:1e:25:63:3f:fb:24:f1:96:f7:4f:96:c0: 6e:15:df:79:29:79:3a:33:f5:03:ad:f3:21:c8:49:c6:27:de: c7:14:03:42:aa:15:2c:1b:94:c2:42:d8:0a:62:d3:b7:9b:6c: b8:c1:db:3d:92:01:43:7b:b3:84:89:77:78:58:53:d7:0b:d8: d4:fd:72:66:07:81:39:1d:96:e8:24:dc:8e:88:7a:3f:b5:90: fc:36:d5:5f:39:b6:4b:20:40:ea:c8:94:df:99:a1:91:66:a8: 68:0e:a9:f6:a6:2f:f7:1d:41:02:40:9f:0e:cd:91:ca:0c:3c: fc:03:8b:15 -----BEGIN CERTIFICATE----- MIIGsTCCBZmgAwIBAgIUfMXRNKN3JVoREovIRO9vqs2psBgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAyMDUwNTM3MDVaFw0yNjAyMDQwNTQyMDVaMDMxMTAvBgNV BAMTKDFCMEY5RjZBREU2MTQ2Rjg2QUZGQTU1RTc5Rjg1RDA0QjBDMTNFRUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEzV3nAgtd2WnW+TJV7uIKHDVP CrOFrQt6x8oTljlhV/XiI47haxlgqui8v69bPsggiudxlhWUsckoG0o4gNeBz0Nm QCU9AciiQZUWvr2M6PbEyaZQVp/sqpvorrRtVyourOTCQgz8n86S6EaBQRCFnjCX O7SfWEa2+iVz3WuIZtgQoYsYY/uGCBM4J0UtisW1HnAiF0/Cgj7T4QacaWuA2M1i KrsykF4qR07LP7m9xu3litmXor/bfTS3wxJ+Tuv7L82Al8svw8wg50do3YN4Jrzg 3QK43n5FPosFyYYlbUoLLbGpf94xTuxQdY5+Y/1JbLflyD2d4cm2XltkURNBAgMB AAGjggO7MIIDtzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQbD59q3mFG+Gr/ pV55+F0EsME+7zAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvOEZDMjY5MkU5NjAzRDIzQUYwMjg1M0RD NzVEMzVGNDY1QkY2MTcyMUZFRUE4RjFEOTY1NTQ0MTc3RDJGOTg0Ni8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy84RkMyNjkyRTk2MDNEMjNBRjAyODUzREM3NUQzNUY0NjVCRjYxNzIxRkVF QThGMUQ5NjU1NDQxNzdEMkY5ODQ2LzAvMUIwRjlGNkFERTYxNDZGODZBRkZBNTVF NzlGODVEMDRCMEMxM0VFRi5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQCg/8EAwQCqM1c AwQCqk5IMA0EAgACMAcDBQAoA+uAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDw NTANBgkqhkiG9w0BAQsFAAOCAQEAta4OSo1m4rW9LPDQsj6vX3QW+tlbzFDWX+rK GGTuq5rg/A+eHpG2BYyEvZvqkrynZHiT8hGIRqupMgOR9l0bGafBcqIHTtYOcBvh Vm8tZouEi6POoIEYxuXxokr5myzoljfrvYmfB+T1qIjJ36xxqZgFKt7A6P9rJrjQ 8wEPY3gcnSE8HiVjP/sk8Zb3T5bAbhXfeSl5OjP1A63zIchJxifexxQDQqoVLBuU wkLYCmLTt5tsuMHbPZIBQ3uzhIl3eFhT1wvY1P1yZgeBOR2W6CTcjoh6P7WQ/DbV Xzm2SyBA6siU35mhkWaoaA6p9qYv9x1BAkCfDs2Rygw8/AOLFQ== -----END CERTIFICATE-----Generated at Wed Nov 5 12:05:41 2025 by rpki-client